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November 3, 2017 


Office of the Maryland Attorney General 
200 St. Paul Place 
Baltimore, MD 21202 


To Whom It May Concern: 

Pursuant to Md. Code Com. Law § 14-3504, this letter is to inform you that data in the 
possession of Wilbraham, Lawler & Buba, P.C. (“WLB”) was potentially breached. WLB is 
a law firm which primarily represents defendants in asbestos, workers’ compensation, and 
other types of personal injury and/or property damage litigation, though it handles other types 
of matters as well. In the course of its work on one of more litigation matters, WLB received 
personal information regarding residents of Maryland. WLB was recently the subject of a 
“ransomware” attack, which resulted in the encryption of all of the data on its servers. Law 
enforcement was notified of the attack, and WLB has conducted an internal review of the 
matter, While it does not appear that theft of personal information was the focus of the attack, 
on or about September 19, 2017, WLB became aware of activity consistent with the potential 
access of such information on its systems. 

Depending on the specifics of a given situation, the types of personal information of 
Maryland residents in WLB’s systems may have included names and some combination of the 
following: Social Security numbers, addresses, medical information, employment 

information, driver’s license information, settlement documentation and dates of birth. Please 
be advised that credit card or bank account information was not provided to WLB. 


WLB takes the protection of personal information seriously and is taking steps to 
prevent any similar occurrence in the future through the construction of an entirely new 
computer system. Furthermore, while the investigation to date does not confirm whether any 
Maryland resident’s personal information was accessed, on November 3, 2017, WLB sent a 
notice to the impacted Maryland residents. A copy of this notice is enclosed. Additionally, 
WLB has agreed to make identity protection services available to the impacted Maryland 
residents for one year free of charge through AllClear ID. 
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WLB believes that this letter is compliant with the notice requirements listed in Md. 
Code Com. Law § 14-3504. If, however, you require additional information or documentation, 
please do not hesitate to contact WLB’s counsel, Christopher Nucifora, Esq., of Kaufman, 
Dolowich & Voluck, LLP at 201-708-8207. Thank you for your time and attention. 


Very truly yours, 


Wilbraham, Lawler & Buba, P.C. 
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JOHN Q, SAMPLE 
1234 MAIN STREET 
ANYTOWN US 12345-6789 


November 3, 2017 

NOTICE OF DATA BREACH 

Dear John Sample, 

We are writing to inform you of an incident that may have involved your personal information. 

What Happened 

Wilbraham, Lawler & Buba, P.C. (“WLET) is a law firm which represents defendants in asbestos, workers' compensation 
and other types of personal Injury and property damage litigation. In the course of such an action, we received personal 
B“° n regardin 9 V° u - WLB was recently the subject of a "ransomware" attack, which resulted in the encryption of all 
° f „ ™ 0U f servers ' Law enforcement was notified of the attack, and WLB has conducted an internal review of the 
™ at !f r - u h ' 6 '* d06S not appear that theft of personal information was the focus of the attack, on or about September 19 
2017 we became aware of activity consistent with the potential access of such information on our systems. 

What Information Was Involved 

Depending art the specifics of a given situation, the types of personal information in our systems may have included 
names and some combination of the following: Social Security numbers, addresses, medical information, employment 
Information drivers license information, settlement documentation and dates of birth. Please be advised that your credit 
card or bank account information was not provided to us. 

What We Are Doing 


WLB takes the protection of your personal information seriously and is taking steps to prevent any similar occurrence in 
the future through (he construction of an entirely new computer system. Furthermore, notice of the breach of our system 
is being provided pursuant to relevant notification statutes. 


What You Can Do? 


While the investigation to date does not confirm whether your personal information was accessed, we want to make you 
aware of steps you may take to guard against identity theft or fraud. Please review the enclosed Information about 
identity Theft Protection. 

As an added precaution, we have arranged to have AllClear ID protect your Identity for 12 months at no cost to you. The 
following identity protection services start on the date of this notice and you can use them at any time durinq the next 12 
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AllClear Identity Repair: This service is automatically available to you with no enrollment required. If a problem arises 
simply call 1-855-260-2771 and a dedicated investigator will help recover financial losses, restore your credit and make 
sure your identity is returned to its proper condition. 
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